$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e75a672e-9319-4a5d-8a0e-142beede6b80/bfe73525-c0c5-36e2-bde3-f6eab3619f69.roa File: bfe73525-c0c5-36e2-bde3-f6eab3619f69.roa (raw, json) Hash identifier: fLpb8W2SWH1WEVX1Rv4ogCRzhxXp6lJHIwDE9PGnQWI= Subject key identifier: C5:8D:55:50:E5:2B:8A:78:54:B6:A8:66:DA:90:1D:54:FD:D8:13:63 Certificate issuer: /CN=e75a672e-9319-4a5d-8a0e-142beede6b80 Certificate serial: 010D0C9F4328584F498C1C667224830DE674C04C Authority key identifier: BE:BE:54:C6:57:7F:37:40:FF:29:18:B4:15:22:D8:23:F9:82:F8:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e75a672e-9319-4a5d-8a0e-142beede6b80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e75a672e-9319-4a5d-8a0e-142beede6b80/bfe73525-c0c5-36e2-bde3-f6eab3619f69.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 397067 IP address blocks: 23.153.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e75a672e-9319-4a5d-8a0e-142beede6b80/e75a672e-9319-4a5d-8a0e-142beede6b80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e75a672e-9319-4a5d-8a0e-142beede6b80/e75a672e-9319-4a5d-8a0e-142beede6b80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e75a672e-9319-4a5d-8a0e-142beede6b80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 20 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8c:1c:66:72:24:83:0d:e6:74:c0:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e75a672e-9319-4a5d-8a0e-142beede6b80 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0976577b-c700-4824-960d-0aff8ef0216f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:f1:fb:6a:59:80:aa:cf:14:58:97:29:08:fb: 98:75:4d:a3:c5:a2:82:b0:8e:21:80:04:68:b5:d2: 61:a6:04:e6:d0:74:d3:4b:0a:76:f8:6d:89:4b:88: 0f:cf:7d:bd:ec:8f:4e:86:ba:75:ec:5d:c7:ca:31: f8:d8:a9:a0:14:67:0a:4b:1d:9d:28:87:5c:5b:ec: 72:0d:3e:48:d3:f3:8d:57:98:ef:46:c2:47:6a:3e: b5:dc:57:f0:cc:c3:42:2e:67:fd:15:30:e7:17:bb: d1:5b:87:cd:09:d4:2d:ca:4f:63:a5:c0:66:e4:8f: 6e:46:54:60:a7:1e:17:8a:02:6c:5a:8d:6b:d9:36: 8f:31:00:63:3b:67:ba:76:e6:fa:50:93:a1:1b:5a: e1:c5:3a:6b:0b:6f:53:ac:9a:43:94:02:43:c6:33: 10:dc:62:fd:fb:38:1a:4c:f4:81:4d:ca:98:62:71: ea:25:ee:14:13:71:9e:76:57:05:85:b0:54:da:9c: b3:6b:5b:57:72:ac:df:53:67:e9:13:21:50:0a:3a: 99:b3:da:ea:63:57:6d:bd:84:ea:ea:d3:45:08:9e: 3b:4d:65:91:58:0d:76:a6:50:01:dc:2f:df:10:11: 50:b6:0a:8d:85:63:ae:fa:02:23:d9:f4:f5:69:ad: 77:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:8D:55:50:E5:2B:8A:78:54:B6:A8:66:DA:90:1D:54:FD:D8:13:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e75a672e-9319-4a5d-8a0e-142beede6b80/bfe73525-c0c5-36e2-bde3-f6eab3619f69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e75a672e-9319-4a5d-8a0e-142beede6b80/e75a672e-9319-4a5d-8a0e-142beede6b80.crl X509v3 Authority Key Identifier: keyid:BE:BE:54:C6:57:7F:37:40:FF:29:18:B4:15:22:D8:23:F9:82:F8:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e75a672e-9319-4a5d-8a0e-142beede6b80.cer sbgp-ipAddrBlock: critical IPv4: 23.153.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:21:81:71:f2:94:d0:98:0c:27:ec:31:b6:72:74:29:3a:16: 28:2c:86:f8:62:72:78:d6:bc:52:8f:16:14:6c:5e:42:08:10: 44:63:d7:a4:2f:ae:12:bc:be:a5:b1:fb:7f:2d:d1:c8:c1:15: 15:55:49:73:1e:ea:ab:76:96:3e:ea:dd:1e:d5:25:19:99:8a: 0b:48:04:fd:72:d6:a3:be:48:73:3e:17:84:82:a5:70:bf:b1: 3f:18:ee:cc:a3:99:27:25:58:c7:56:e6:3f:c4:9c:f7:80:cd: 62:5d:25:a6:a6:3f:14:3f:c9:b7:74:8b:cb:a4:41:20:99:df: e8:f1:0b:40:65:28:b2:db:81:28:b3:44:7b:be:72:b0:e9:7d: d3:ff:f8:42:d9:7b:a0:7f:04:cb:28:80:00:a8:1b:df:0a:ac: b5:de:d6:b7:39:8c:81:94:41:1f:0a:e1:e7:09:d1:df:f3:b0: 7e:76:9f:9d:7b:4f:05:5e:fb:72:e5:e8:ea:03:fa:e4:70:e6: c3:9e:6c:25:42:b5:b3:9a:53:20:e9:ec:45:a0:c1:73:5e:0a: 75:88:1d:13:83:7b:7a:9a:d7:99:9b:cb:e8:fd:89:e0:e9:ae: b9:99:05:96:07:c4:c8:35:75:e4:0a:26:42:f7:97:20:8c:ba: 50:40:09:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JjBxmciSDDeZ0wEwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTc1YTY3MmUtOTMxOS00YTVkLThhMGUtMTQyYmVlZGU2 YjgwMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDk3NjU3N2ItYzcwMC00ODI0LTk2MGQtMGFmZjhlZjAyMTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3fH7almAqs8UWJcpCPuYdU2jxaKCsI4hgARo tdJhpgTm0HTTSwp2+G2JS4gPz3297I9Ohrp17F3HyjH42KmgFGcKSx2dKIdcW+xy DT5I0/ONV5jvRsJHaj613FfwzMNCLmf9FTDnF7vRW4fNCdQtyk9jpcBm5I9uRlRg px4XigJsWo1r2TaPMQBjO2e6dub6UJOhG1rhxTprC29TrJpDlAJDxjMQ3GL9+zga TPSBTcqYYnHqJe4UE3GedlcFhbBU2pyza1tXcqzfU2fpEyFQCjqZs9rqY1dtvYTq 6tNFCJ47TWWRWA12plAB3C/fEBFQtgqNhWOu+gIj2fT1aa13owIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMWNVVDlK4p4VLaoZtqQHVT92BNjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9lNzVh NjcyZS05MzE5LTRhNWQtOGEwZS0xNDJiZWVkZTZiODAvYmZlNzM1MjUtYzBjNS0z NmUyLWJkZTMtZjZlYWIzNjE5ZjY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvZTc1YTY3MmUtOTMxOS00YTVkLThh MGUtMTQyYmVlZGU2YjgwL2U3NWE2NzJlLTkzMTktNGE1ZC04YTBlLTE0MmJlZWRl NmI4MC5jcmwwHwYDVR0jBBgwFoAUvr5Uxld/N0D/KRi0FSLYI/mC+IQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9lNzVhNjcyZS05MzE5LTRhNWQtOGEwZS0xNDJi ZWVkZTZiODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5lUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQhgXHylNCYDCfsMbZydCk6FigshvhicnjWvFKPFhRsXkIIEERj16Qv rhK8vqWx+38t0cjBFRVVSXMe6qt2lj7q3R7VJRmZigtIBP1y1qO+SHM+F4SCpXC/ sT8Y7syjmSclWMdW5j/EnPeAzWJdJaamPxQ/ybd0i8ukQSCZ3+jxC0BlKLLbgSiz RHu+crDpfdP/+ELZe6B/BMsogACoG98KrLXe1rc5jIGUQR8K4ecJ0d/zsH52n517 TwVe+3Ll6OoD+uRw5sOebCVCtbOaUyDp7EWgwXNeCnWIHRODe3qa15mby+j9ieDp rrmZBZYHxMg1deQKJkL3lyCMulBACSE= -----END CERTIFICATE-----Generated at Mon Oct 19 04:43:54 2026 by rpki-client